$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96ad36d2-6f8e-46f9-8530-bbfa23109fa0.roa File: 96ad36d2-6f8e-46f9-8530-bbfa23109fa0.roa (raw, json) Hash identifier: zWfOIstytHyeXNfMQdDE2OgBpwQ7LrD4T8/SIgBTc08= Subject key identifier: BF:CF:DE:76:19:86:14:83:47:80:73:36:40:2F:E4:4A:B0:4E:66:A8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 38EAB5A293FC2A1FAD925F63A16C7F563008667E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96ad36d2-6f8e-46f9-8530-bbfa23109fa0.roa Signing time: Mon 09 Jun 2025 17:40:08 +0000 ROA not before: Mon 09 Jun 2025 17:40:08 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.237.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ea:b5:a2:93:fc:2a:1f:ad:92:5f:63:a1:6c:7f:56:30:08:66:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 17:40:08 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=fc4fe2cbe39abdb72eaf156cfb7e5f68a3caa0dadd750ccf2139c091ed646cd2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:2a:3c:b1:52:9d:01:07:40:3b:19:b7:1c: 8d:80:d2:15:7b:23:0e:c1:a9:cd:6e:d0:3d:02:f3: 0f:bc:79:12:5e:ea:73:76:70:37:2e:5b:ac:08:c6: 7d:dd:08:e3:5c:82:0b:a6:5c:71:30:99:fa:b6:af: 1c:5e:2f:b4:11:b6:e0:57:54:c4:2a:7e:ec:99:31: 26:03:09:8a:96:20:93:af:a3:55:d6:6e:c6:9c:76: 28:f7:16:47:b6:25:1d:2e:17:c6:8c:2e:e4:c4:4b: 92:59:11:fa:8d:65:7b:d9:01:c6:8f:3b:2f:82:a8: 2d:ec:e7:6f:c7:98:4b:6d:2d:81:58:bf:45:dd:c6: 9f:25:e5:89:be:d2:bb:06:aa:6a:bc:e7:f8:6e:1a: b7:8d:83:95:94:e8:65:e7:3e:96:86:f5:eb:ed:22: 7b:f0:3b:83:71:88:3b:53:5f:af:4f:15:e7:a2:15: 9c:d7:6b:97:df:ab:7a:79:20:4a:5c:6a:ce:fe:89: 46:42:5d:da:16:49:89:c3:68:b2:fa:eb:17:11:a4: 1f:fd:34:46:a6:cf:b6:1c:0b:1a:c7:2d:22:8c:29: 37:c6:b6:4c:76:19:b3:90:60:47:56:a4:3b:95:71: 8f:7d:a0:27:8d:5f:a4:0b:55:5a:3b:90:d8:92:81: 27:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CF:DE:76:19:86:14:83:47:80:73:36:40:2F:E4:4A:B0:4E:66:A8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96ad36d2-6f8e-46f9-8530-bbfa23109fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.237.224.0/20 Signature Algorithm: sha256WithRSAEncryption 27:b0:26:56:33:c8:b1:cf:ad:75:e3:a6:34:26:6d:29:39:0d: dc:9f:6e:bb:29:a6:e3:b5:1d:61:7d:02:94:d1:fc:ce:49:0b: 4c:66:be:84:4b:7e:ec:06:48:24:c3:7e:e4:72:ae:9e:d5:85: 7e:4b:bc:68:4c:ec:2c:f9:7f:df:d8:99:5d:3b:a4:f9:32:00: a4:d6:f5:a3:b9:92:2d:f4:df:7a:10:2d:9a:2c:9c:d5:a6:8f: 23:4a:41:5e:80:88:80:22:ae:bb:65:68:70:23:20:60:b3:47: cd:51:f7:8a:4c:32:59:ef:1d:c8:75:51:a2:ec:90:79:12:a4: dd:ba:9d:d0:0c:60:14:4b:75:4d:42:cb:40:de:c5:82:27:34: 15:d1:01:a4:a7:6a:56:90:23:2b:25:92:b6:be:0d:86:2a:24: fa:b0:43:f8:17:84:12:73:5b:e3:44:6c:c6:1f:70:42:a1:43: cc:71:13:28:e8:90:b5:e5:d5:77:cb:8f:aa:db:aa:bc:e1:46: 7a:9b:91:00:92:c7:16:f5:da:51:6c:34:25:22:79:81:97:de: 38:58:1f:90:c8:5a:d0:a5:48:d4:cd:ff:8b:cb:db:5c:c6:d9: 4b:e3:20:7e:95:35:a8:e5:98:36:a2:f6:03:d7:2c:56:f1:95: 37:c0:55:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOOq1opP8Kh+tkl9joWx/VjAIZn4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTc0MDA4WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzRmZTJjYmUzOWFiZGI3MmVhZjE1NmNmYjdlNWY2OGEz Y2FhMGRhZGQ3NTBjY2YyMTM5YzA5MWVkNjQ2Y2QyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOMCo8sVKdAQdAOxm3HI2A0hV7Iw7Bqc1u0D0C8w+8eRJe 6nN2cDcuW6wIxn3dCONcggumXHEwmfq2rxxeL7QRtuBXVMQqfuyZMSYDCYqWIJOv o1XWbsacdij3Fke2JR0uF8aMLuTES5JZEfqNZXvZAcaPOy+CqC3s52/HmEttLYFY v0Xdxp8l5Ym+0rsGqmq85/huGreNg5WU6GXnPpaG9evtInvwO4NxiDtTX69PFeei FZzXa5ffq3p5IEpcas7+iUZCXdoWSYnDaLL66xcRpB/9NEamz7YcCxrHLSKMKTfG tkx2GbOQYEdWpDuVcY99oCeNX6QLVVo7kNiSgSefAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv8/edhmGFINHgHM2QC/kSrBOZqgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2YWQzNmQyLTZmOGUtNDZmOS04NTMwLWJiZmEyMzEwOWZhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ27eAwDQYJKoZIhvcNAQELBQADggEBACewJlYzyLHPrXXjpjQmbSk5Ddyf brsppuO1HWF9ApTR/M5JC0xmvoRLfuwGSCTDfuRyrp7VhX5LvGhM7Cz5f9/YmV07 pPkyAKTW9aO5ki3033oQLZosnNWmjyNKQV6AiIAirrtlaHAjIGCzR81R94pMMlnv Hch1UaLskHkSpN26ndAMYBRLdU1Cy0DexYInNBXRAaSnalaQIyslkra+DYYqJPqw Q/gXhBJzW+NEbMYfcEKhQ8xxEyjokLXl1XfLj6rbqrzhRnqbkQCSxxb12lFsNCUi eYGX3jhYH5DIWtClSNTN/4vL21zG2UvjIH6VNajlmDai9gPXLFbxlTfAVVw= -----END CERTIFICATE-----Generated at Sat Jun 14 23:52:30 2025 by rpki-client